This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft
File:                     iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft (raw, json)
Hash identifier:          hO3BqLQW2vBst497Y1UzG9SpOWyPgtVc1bbMLhrKP4A=
Subject key identifier:   E2:72:C4:A1:88:EA:99:A8:3D:77:30:46:EF:CF:C5:25:9A:6B:22:C6
Authority key identifier: 89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45
Certificate issuer:       /CN=89056fa9625b6c87404267c6dc219924ac160045
Certificate serial:       019BF462ACBEC9ABC82507752F07F4529A05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft
Manifest number:          1815
Signing time:             Sun 25 Jan 2026 09:01:05 +0000
Manifest this update:     Sun 25 Jan 2026 09:01:05 +0000
Manifest next update:     Mon 26 Jan 2026 09:01:05 +0000
Files and hashes:         1: 08tWIG0PWPMB6teHHPxQow1s2uE.roa (hash: TRz7F0l+NZVOM8RvaeEJy+Qjij2W704OcN/st69PivQ=)
                          2: 1-UqZU4lpdGQymEWntoGUKEtiDfs.roa (hash: uTnzw0q4V97naKhct/jjJQaHWdigAfbfM0kb6Q0iHPQ=)
                          3: 140kRQEj3h0GjQtPnM7mNhB0pd0.roa (hash: Glji+wdNx0lC1Qzp3pek3CS+AHdgtNRm2/n00pXzbAo=)
                          4: 1dV6pkuQdd-HC1y6xQt3McROiYw.roa (hash: gXtTDzPv9WQmg2U2/AVAIR2HMc660QfTKzCojb5m4Ek=)
                          5: DB2WtvMT6TxXIgEHXGIAtXj5H0k.roa (hash: Dnxb8mZ2R2y2UMXQPUm34dqJpzSVn8nnfGQsSFiCrQc=)
                          6: FUcbBOzjjlbY_wlRLYHqupvBQoY.roa (hash: cfKmdGrx3472puEg8Y3AGEJtcDQtTCxIr5rg73nD5Fs=)
                          7: GA5NIaob_i0eg5R554MtD65rkDU.roa (hash: bpwMu6JYsIFlQS/jF79o+wgM6JCrcfl8VddhfNU17mo=)
                          8: I1s63daDxmdSUkoW3y6FqwGC_kI.roa (hash: 2cA/q0JWCQ+iKL0Tgi1c5YHyZkG1aHs+6TYtD4toyos=)
                          9: IAog0mAhjeJoKpCE7InfTrDEICE.roa (hash: paRV5HrLIvsP8VMOY2Cmvjxq2/JHKdV5V7s5Hxdb4ho=)
                          10: N7EYzGEcYA36m-xSvdYRWYsCcUE.roa (hash: WxQmK8/jxnVfJLUqxdBcxCVr+Pgy+YeHJkLPADfkzds=)
                          11: OqIocgnak9yhJpreiE6Mi6z6xSU.roa (hash: Rwov355LSNytrdcR+XWNcMvCnOqJKqNHapmX2SP3tWA=)
                          12: P_ICJAuY1fS-sdbKO3ae7kjYH9k.roa (hash: USZSiJ9BppPlcXgUCCMjXHlF5EFhbbiWLDr45EjJQiw=)
                          13: Qu1Mc8WQ6eeAPH9uUS6S5I-qTeo.roa (hash: VfijZBef7xJk1wzgvIwnq71YHQKXU+yJECoJTQRx0kE=)
                          14: RN6drM--dD_6tv6f7ZT4g-Tmx4M.roa (hash: 45pPotnyCUMx03gGTQCEe2Fo2L9SNyOnrMGfMN+GUgw=)
                          15: TjgQANrKozyjOw4w5hYOpjN8uMI.roa (hash: ZPk1Xebxi+DiSuX9N5KulEgI7Xg4MHf0W/5nIFTVTvE=)
                          16: iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl (hash: y8LTFnUWoJu5J8RQb0pMU0ia8ZllCa17AiE3YitsgO8=)
                          17: ism2bNCba5CRcXgOISoZjzrR_jk.roa (hash: dVX1PspVHvMWPysATRUgDChbCgGx47lGOpGb8yF+l7A=)
                          18: kHBXqwhaHY9YgoftEomJM-YmPQM.roa (hash: Fv2HJ19zHGdY+cirM1+n1J1pjKCaMFvflEkbxIMaw+U=)
                          19: qqOBoufK9Bv9fBzKEZO1Ybb2Xms.roa (hash: w+bQOMrvhdWjYo96qmwB8eS7ozAg8IZHWE6OTWarCag=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f4:62:ac:be:c9:ab:c8:25:07:75:2f:07:f4:52:9a:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89056fa9625b6c87404267c6dc219924ac160045
        Validity
            Not Before: Jan 25 09:01:05 2026 GMT
            Not After : Jan 26 09:01:05 2026 GMT
        Subject: CN=e272c4a188ea99a83d773046efcfc5259a6b22c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e3:27:e8:52:01:c5:c6:10:b9:1e:3a:f7:79:
                    d0:33:41:00:40:6e:99:f1:99:44:f7:6a:53:ad:cc:
                    7d:a2:7a:60:39:27:de:57:74:f6:3c:84:3b:07:13:
                    3d:a2:70:a6:af:88:00:75:91:80:64:2c:e0:0c:fa:
                    67:16:a8:94:d6:b5:81:e6:10:2a:43:c8:7a:89:bf:
                    62:94:4e:a3:e5:f6:18:b5:22:f1:7a:9d:b2:fb:ee:
                    0f:21:3f:97:89:cf:f7:5e:02:bc:91:10:e8:62:5d:
                    c8:d5:4f:08:3e:c5:6e:d6:da:9c:3d:fc:2b:7f:ce:
                    d6:74:99:d8:3a:57:3d:7f:78:ff:be:2f:c1:e0:b4:
                    c5:47:58:b8:34:21:65:52:2a:99:8f:6d:a8:4d:a2:
                    29:2e:b5:4a:4c:12:c1:04:48:c8:18:30:c6:c5:8b:
                    05:d0:07:a6:44:40:99:df:56:87:d9:f4:02:ae:fd:
                    98:07:80:c9:67:31:c1:1e:eb:d2:e4:84:c5:00:73:
                    69:1d:b6:ec:38:96:6d:75:f9:7b:26:37:97:8b:49:
                    60:cc:c3:b4:ee:53:7d:8b:75:a5:1e:64:2e:10:9c:
                    8f:aa:4a:b7:8c:76:63:39:bf:ef:c9:5c:6f:d7:cb:
                    96:cd:a7:a5:3e:ac:5b:4a:d0:cb:32:2a:4e:df:79:
                    97:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:72:C4:A1:88:EA:99:A8:3D:77:30:46:EF:CF:C5:25:9A:6B:22:C6
            X509v3 Authority Key Identifier:
                keyid:89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:b8:f4:2d:67:49:39:9d:e7:fa:6c:f3:c3:c4:80:ea:4d:f7:
         a9:a1:cc:3a:ae:f3:0d:18:59:2e:13:9d:23:ed:53:fb:b5:65:
         75:e7:28:b7:87:0c:5b:07:e3:3d:22:98:c6:16:f0:80:3e:22:
         c8:7c:b6:ea:41:da:c8:d4:3d:30:e5:02:95:82:8d:a3:31:d5:
         a5:6d:e4:f4:29:34:3a:4a:91:2a:f9:1e:60:ec:1a:9f:88:c8:
         88:e7:22:9a:29:c7:ca:36:a2:a5:a5:16:77:13:6e:61:02:36:
         78:3f:65:60:31:25:71:33:89:68:1f:6e:75:45:ff:16:57:09:
         3c:c2:0b:e2:56:87:9e:91:9b:98:13:cf:0d:5c:b0:53:54:6c:
         31:51:ef:b5:85:f4:8d:7d:71:d0:66:94:76:7f:13:b2:6d:00:
         b7:ce:0a:7a:45:99:f4:ec:95:6f:0f:08:d4:cf:d3:d0:3c:28:
         fa:bf:a4:e5:26:a7:5b:88:90:a7:44:dc:b6:f2:6f:8c:a6:29:
         d3:2c:26:d3:29:54:13:88:0a:9a:cd:2f:44:3f:9a:a2:34:3e:
         cd:91:7d:66:f3:20:ce:f2:2f:55:93:84:f7:a4:c0:51:bc:bc:
         cb:8b:74:50:ed:ca:73:58:5e:90:9a:25:d6:f1:0a:fa:24:e7:
         cb:a0:a9:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:45:12 2026 by rpki-client